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proxy server 


Last modified: June 16, 1997 


A server that sits between a client application , such as a Web browser , 
and a real server. It intercepts all requests to the real server to see if it 
can fulfill the requests itself. If not, it forwards the request to the real 
server. 

Proxy servers have two main purposes: 

• Improve Performance: Proxy servers can dramatically improve 
performance for groups of users. This is because it saves the 
results of all requests for a certain amount of time. Consider the 
case where both user X and user Y access the World Wide Web 
through a proxy server. First user X requests a certain Web page , 
which we'll call Page 1 . Sometime later, user Y requests the same 
page. Instead of forwarding the request to the Web server where 
Page 1 resides, which can be a time-consuming operation, the 
proxy server simply returns the Page 1 that it already fetched for 
user X. Since the proxy server is often on the same network as the 
user, this is a much faster operation. Real proxy servers support 
hundreds or thousands of users. The major online services such as 
Compuserve and America Online , for example, employ an array of 
proxy servers. 

• Filter Requests: Proxy servers can also be used to filter requests. 
For example, a company might use a proxy server to prevent its 
employees from accessing a specific set of Web sites . 


See also: 

firewall 
server 


Web server 
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firewall 


Last modified: May 29, 1997 


A system designed to prevent unauthorized access to or from a private 
network . Firewalls can be implemented in both hardware and software , 
or a combination of both. Firewalls are frequently used to prevent 
unauthorized Internet users from accessing private networks connected 
to the Internet, especially intranets . All messages entering or leaving the 
intranet pass through the firewall, which examines each message and 
blocks those that do not meet the specified security criteria. 


There are several types of firewall techniques: 


• Packet filter: Looks at each packet entering or leaving the network 
and accepts or rejects it based on user-defined rules. Packet 
filtering is fairly effective and transparent to users, but it is difficult 
to configure. In addition, it is susceptible to IP spoofing . 

• Application gateway: Applies security mechanisms to specific 
applications, such as FTP and Telnet servers. This is very effective, 
but can impose a performance degradation. 

• Circuit-level gateway: Applies security mechanisms when a TCP or 
UDP connection is established. Once the connection has been 
made, packets can flow between the hosts without further 
checking. 

• Proxy server: Intercepts all messages entering and leaving the 
network. The proxy server effectively hides the true network 
addresses. 


In practice, many firewalls use two or more of these techniques in 
concert. 


A firewall is considered a first line of defense in protecting private 
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information. For greater security, data can be encrypted . 


See also: 
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intranet 
IP spoofing 


network 
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Firewall lab test - article ~i C 

Data Communications article (March 21, 1997) on the performance results of 20 
firewall products. Reveals trends, product features and downfalls. Updated on Aug 27, 1997 

Paper on Internet firewalls and security "fc 

This paper, from 3Com, focuses on many of the issues relating to the construction of 
Internet firewalls, including their benefits, limitations, building blocks, and examples 

Of firewall System topologies. Updated on Jul 13, 1997 

Rotherwick firewall resources ?/c 

Contains over 900 firewall and Internet security links as well as introductory 
information on firewalls and network security. Updated on Jul 18, 1997 

TechTools article on firewalls £f c 

This TechTools article, from January 22, 1997, provides a good description of firewall 
technology including functionality, ease-of-use and hybrid systems, and links to a 

firewall feature table and pricing and platform information. Updated on Aug 26, 1997 

Firewall documents and product resources 

Provides links to firewall documents, products and a mailing list. 

Firewall product overview 

Contains a directory of commercial firewall products. Updated on Apr 19, 1997 
Firewalls FAQ 

Contains answers to basic questions about firewalls. Updated on Jun 22, $97 
Firewalls mailing list 

This is the sign-up page for an Internet firewall mailing list. 


Trusted Information Systems home page 

Home page of Trusted Information Systems, a provider of network security products. 
This page provides links to a company overview, products and services, and research. 

Yahool's firewall companies page 

Yahool's directory of firewall companies. Updated on Aug 16, 1997 

Yahool's firewall page 

Yahool's directory of firewall. Updated on Aug 16, 1997 

Yahool's firewall utilities page 


2 of 3 


9/3/97 6:00 PM 


firewall - PC Webopaedia Definition and Links 




Yahoo !'s directory of firewall utilities. Updated on Aug 16, 1997 
i Definition k Unks i Search 


http://www.pcwebopaedia.com/firewalLhtm 


Click here for more information 



yj FEEDBA CK 


These pages and their contents ©1996, 1997 


The Sandy Bay Software and PC Webopaedia logos are trademarks of Sandy Bay Software, Inc. 

All rights reserved. 


Last Modified: August 27, 1997 


3 of 3 


9/3/97 6:00 PM 


NETSYS.COM http://www.netsys.com/cgi-bin/AT-firewallssearch.cgi 




jXvi; \v-- >.-:->X-X->I-!v ■- - 


U n ix. I nter net.Sec u r itv. 


netsys. 


/* VlCTl Systems, Networks, Administration 
**V«II Since 1977 


NETSYS.COM: Unix System Administration | Technical Library | Realtime Video Server | Solaris 2.5.1 

Manuals | SNMP Monitoring | Resume | Send Mail | Site Map | Home | Pager 


Grouped by • Confidence es#*t 


excite for web servers found documents about: proxy [ '1 S^art:ti 


III - higher confidence, W - lower confidence; click icons to find similar documents 

86% Firewalls Mailing List: Re: WWW proxy information 


Summary. NETSYS.COM Solaris Test Facility 
ijj 86% Firewalls Mailing List: Re: Help on Proxy! 
Summary: NETSYS.COM Solaris Test Facility 


m 86% firewalls.9510: Re: Firewalls-Digest V4 #608 


Summary: NETSYS.COM Solaris Test Facility 


84% firewalls.9506: Re: Different ways in which Firewalls work, which is more secure ? 

Summary: NETSYS.COM Solaris Test Facility 


ill 84% firewalls. 9601: proxy vs non-proxy 

Summary: NETSYS.COM Solaris Test Facility 
@ 84% firewalls. 9601: Re: Perimeter net and official net addresses 

Summary: NETSYS.COM Solaris Test Facility 
(ll 82% firewalls. 9601: Re: proxy vs non-proxy 

Summary: NETSYS.COM Solaris Test Facility 
I 82% firewalls.9510: Re: Firewalls-Digest V4 #608 
Summary: NETSYS.COM Solaris Test Facility 


1 of 3 


9/3/97 5:48 PM 


NETSYS.COM 



http:/Avww.netsys.com/cgi-bin/AT-firewallssearch.cgi 


\M 82% Firewalls Mailing List: Re: SYN floods - possible solution?(update) 


Summary: NETSYS.COM Solaris Test Facility 


® 82% firewalls.9601: Re: proxy vs non-proxy 


Summary: NETSYS.COM Solaris Test Facility 


® 82% firewalls.9601: Re: proxy vs non-proxy 

Summary: NETSYS.COM Solaris Test Facility 
CD 82% firewalls.9510: Re: Firewalls-Digest V4 #608 

Summary: NETSYS.COM Solaris Test Facility 
(2J 82% Firewalls Mailing List: Re: Oracle Proxies - What firewalls have them, how effective 

Summary: NETSYS.COM Solaris Test Facility 
O 82% Firewalls Mailing List: Re: WWW, Wais and Gopher proxies 

Summary: NETS YS . COM Solaris Test Facility 
@ 80% Firewalls Mailing List: Re: WWW, Wais and Gopher proxies 

Summary: NETSYS.COM Solaris Test Facility 
(ll 80% Firewalls Mailing List: Proxving Lotus Notes 

Summary: NETSYS.COM Solaris Test Facility 
® 80% Firewalls Mailing List: WWW proxy information 

Summary: NETSYS.COM Solaris Test Facility 
(il 80% Firewalls Mailing List: Re: Generic Proxy 

Summary: NETSYS.COM Solaris Test Facility 
© 80% Firewalls Mailing List: Re: proxies for nslookup, ping, traceroute? 

Summary: NETSYS.COM Solaris Test Facility 
@ 80% Firewalls Mailing List: Re: SSL and HTTP filtering 

Summary: NETSYS.COM Solaris Test Facility 


2 of 3 


9/3/97 5:48 PM 


NETSYS.COM 



http:/Avww.netsys.com/cgi-bin/AT-firewallssearchxgi 


e^c i t e 


Copyright © 

1994,1995,1996,1997 

by Len Rose 

All Rights Reserv ed 


NETSYS.COM 

Unix, Internet & Security 
Len Rose len@netsvs.com 
http ://www.netsvs. com 


vS;:vi: : : : ; ; : : SSEfti : :<-:">.-K : :«i'>^ 'iy iSivW 



3 of 3 


9/3/97 5:48 PM 


Firewalls Mailing List: firewalls book 



j^:/Avww.netsys.com/firewalls/firewalls-9404/0208.html 


U n ix. I nter net.Sec u ritv. 


niisys 


f*f\¥Y\ Systems, Networks, Administration 
*wlH Since 1977 


NETSYS.COM: Unix System Administration | Mailing List Archives | Realtime Video Server | Solaris 

2.5.1 Manuals | SNMP Monitoring | Resume | Send Mail [ Site Map | Home 


firewalls book 

smb@research. atL com 

Tue, 26 Apr 94 17:42:45 EDT 

• Messages sorted by: f date If thread If subject U author 1 

• Next message: John [Francis] Stracke: "WWW proxy information" 

• Previous message: Kevin Altis: M Re: WWW proxy information" 

Since I've received a fair number of questions about the book, I'll 
make one (and only one) post about it, with the prior permission of 
our esteemed host and (quasi-)moderator. The book is 

Firewalls and Internet Security: Repelling the Wily Hacker 
William R. Cheswick and Steven M. Bellovin 
Addison-Wesley 
ISBN 0-201-63357-4 
$26.95, paperback 

The book was printed yesterday (literally!); it should be in technical 

bookstores within a couple of weeks, and in larger general bookstores 

(i.e., Barnes and Noble) by the end of May. It will take somewhat 

longer for the book to reach non-U. S. locations. If you can't find 

it in your own neighborhood, you can order it directly from Addison-Wesley. 

You can snarf the preface, table of contents, and cover from 

research.att.com:/dist/internet_security/firewall.book/* 

More stuff (i.e., an errata list) may show up there on occasion. There's 
a gopher and ftp server on aw.com, but they're not fully up to speed yet. 

—Steve Bellovin 
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Report Fall 1995 By Sanjay Kumar School of Engineering and 
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Argus Associates of Tampa, Inc.: DSP embedded system 
microprocessor design 

DSP embedded system microprocessor design. 
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NewsMonger USENET Search Agent for the Internet 

NewsMonger: An Internet USENET search and monitoring agent. 
Automatically monitors news group submissions. Supports 

Windows 95 & NT.. 

http://www.techsmith.com/products/nmonger/overview.htm 

Application Note: SNMP Proxy Agent 

Larscom Wordmark Logo Application Notes BannerSNMP Proxy 
AgentTechnical BulletinSNMP Management for Larscom Network 
Access DevicesSNMP (Simple Network Management Protocol) has 

emerged .... 

http://www.larscom.com/an_snmp.htm 

CoBox Terminal Server. Ethernet and Token Ring 

ACOLA Ethernet and Token Ring TCP/IP Terminal Server, 
standalone and integratable. 

http://cobox.com/ 


Larscom SNMP Element Management System & Proxy Agent 

Larscom Wordmark Logo Network Management Banner 
SNMPEIement Management System & Proxy 
AgentContentsApplications and BenefitsLarscom SNMP Proxy 

AgentAlarm and Performance Rep .... 

http://www.larscom.com/nm_snmp.htm . 
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8. Subject: proxvd - SNMP proxy agent daemons from SNMP 
Research. Keywords: 
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library, sourcelib. Internet Tool Catalog PROXYD NAME proxyd -- 

SNMP proxy agent daemons from SNMP Research 
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Research. Keywords: 
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proxy agent daemons from SNMP Research. KEYWORDS control, 
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http://www.duth.gr/lnfoBase/noc/proxyd_snmp_research.txt 

10. Internet How to: Using Shell Accounts 

Computer Currents Interactive web site is based on the successful 
formula of the Computer Currents magazine aimed at PC and Mac 

users in the late stages of the purchasing process 

http://www.currents.net/cciu/advisor/netguide/nethowto5.html 
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